Door access control for a small business: a practical buyer's guide

Signs your business has outgrown keys

Keys work well when three people share one door and never change. They stop working when the business changes around them. The usual triggers are staff turnover, vendors and cleaners who need to get in, after-hours access, and the uncomfortable moment when something goes missing and nobody can say who was last through the door.

A key cannot tell you who used it, and it cannot be switched off. Getting one back from a former employee depends on that person's goodwill, and a copy may exist that you never knew about. The only real fix is rekeying, which means a locksmith visit and new keys for everyone, every time someone leaves.

Choosing credentials: phone, card, fob, or PIN

Each credential type suits a different kind of person. Phones are convenient for staff who already carry one. Cards and fobs suit people who do not want work software on a personal phone, or who work in places where phones are awkward. PINs suit visitors and short-term access, though a PIN is the weakest option because it can be shared without anyone noticing.

Most small businesses end up with a mix: phones or cards for staff, PINs for a cleaning crew or a delivery window. What matters is that each credential belongs to one named person, because that is what makes the log and the revoke meaningful. A shared code on a keypad is just a key that cannot be cut off without telling everyone.

Schedules, revoking access, and the audit log

Schedules are set per person. A weekday employee can be limited to business hours, a cleaner to evenings, and an owner to everything. Someone who tries a door outside their window is simply refused, and that attempt is recorded.

Revoking access takes a moment from the management screen, and it takes effect at the door right away. That is the practical answer to how to cut off a former employee: you disable one credential, and nothing needs to be collected or rekeyed. Compare that with your current process honestly, because it is usually the strongest argument for making the change.

The audit log is the part owners underestimate. It records who entered which door and when, so a question like who was in the stockroom on Friday night has an answer instead of a guess. Pair it with cameras at key entries and you can match a name to a face.

What to decide before the walkthrough

A short list of answers makes the walkthrough faster and the plan more accurate. Write these down before anyone visits:

Which doors and gates need control? Start with the front door, the back or loading door, any storeroom, server or records room, and any gate. Not every door needs a reader, and leaving some on a mechanical key is a perfectly reasonable choice.

Who needs access, and when? List roles rather than names if that is easier: owners, full-time staff, part-time staff, vendors, cleaners. Note which of them need after-hours entry.

How does offboarding happen today? Describe what you actually do when someone leaves, including who holds spare keys. Gaps in that answer are what the new system needs to close.

Do you need a video intercom? If customers or deliveries arrive when the door is locked, being able to see and talk to a visitor and release the door remotely may matter more than any credential type.

Our free security walkthrough guide explains what happens when we visit, including the photos and the written coverage plan you keep either way.

When the internet or power goes out

This is the question to settle early. A good system keeps working when the internet drops. The controllers store credentials locally, so a person who is allowed in at 8 a.m. is still let in at 8 a.m., and the same schedules keep being enforced. What you lose during an outage is remote management and live alerts, not the doors.

Power is handled with battery backup, and every door also has a mechanical override so there is a manual way through the door if a battery or component fails. Ask any installer to show you exactly how each door behaves in both situations. If the answer is that it depends on the cloud, keep asking.

The access system also lives on your network, and that deserves a little thought. We keep these devices on their own segment, away from office computers, which is covered in our network segmentation guide for small business.

Fire code, fail-safe, and fail-secure in plain terms

A fail-safe lock unlocks when it loses power. A fail-secure lock stays locked when it loses power. Neither is better in general. Which one belongs on a given door depends on how people must leave the building and what the life-safety rules require for that door.

That is why this is decided door by door, to life-safety code, and coordinated with the fire and alarm systems rather than chosen from a catalog. A lock that traps people in an emergency is a serious problem, and one that opens too easily defeats the purpose. The door access control page goes into the detail.

Questions to ask any access control installer

These are worth asking whoever you talk to, including us. Do the controllers keep enforcing schedules and credentials when the internet is down? Where are credentials stored, and who owns the hardware and the data? What happens at each door when power fails, and is there a mechanical override? How is fail-safe or fail-secure decided for each door, and who coordinates with the fire and alarm systems?

Also ask how a credential is revoked and how fast it takes effect, what the log records and how long it is kept, and whether you will be paying a fee just to keep using doors you already bought. Finally, ask how the system is kept off your office network. A clear, specific answer to each is a better signal than any brochure.

If you are in Lompoc, our page on commercial security in Lompoc shows how we approach local businesses. For businesses in the Santa Maria area, see our Santa Maria page. You can also start with a ten minute call.